<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=ks_c_5601-1987">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7036.0">
<TITLE>RE: [Winpcap-users] PC rebooting phenomenon in winpcap application</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">I'm appreciate for your help~</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">I have installed the newest version of WinPcap, and the blue</FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">screen has</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"> not been</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"></FONT> <FONT SIZE=2 FACE="Courier New">shown at least</FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">on</FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">several</FONT></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Courier New">trails</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">!</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">It was really helpful~</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Cholmin Kim</FONT></SPAN></P>
<BR>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">-----Original Message---</FONT><FONT SIZE=2 FACE="Courier New">--<BR>
</FONT><FONT SIZE=2 FACE="Courier New">From:</FONT><FONT SIZE=2 FACE="Courier New"> winpcap-users-bounces@winpcap.org [<A HREF="mailto:winpcap-users-bounces@winpcap.org">mailto:winpcap-users-bounces@winpcap.org</A>]</FONT> <FONT SIZE=2 FACE="Courier New">On Behalf Of</FONT> <FONT SIZE=2 FACE="Courier New">Gianluca Varenni<BR>
</FONT><FONT SIZE=2 FACE="Courier New">Sent:</FONT><FONT SIZE=2 FACE="Courier New"> Wednesday, November 01, 2006 1:12 AM<BR>
</FONT><FONT SIZE=2 FACE="Courier New">To:</FONT><FONT SIZE=2 FACE="Courier New"> winpcap-users@winpcap.org<BR>
</FONT><FONT SIZE=2 FACE="Courier New">Subject:</FONT><FONT SIZE=2 FACE="Courier New"> Re: [Winpcap-users] PC rebooting phenomenon in winpcap app</FONT><FONT SIZE=2 FACE="Courier New">lication</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">I think you obtain that crash information using windbg and the crash dump or </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">minidump.</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">First of all, I suggest you to migrate to winpcap 3.1 or better winpcap 4.0 </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">beta2. We cannot provide any support for 3.1beta4 (which is really old).</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">If you still experience such crashes, please post a zipped copy of the crash </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">dump or minidump to <A HREF="ftp://www.winpcap.org/pub/incoming">ftp://www.winpcap.org/pub/incoming</A> (and send me a mail </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">after uploading it).</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Hope it helps</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">GV</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">----- Original Message ----- </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">From: "</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="±¼¸²">±èö¹Î</FONT></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">" <cmkim@sysonchip.co.kr></FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">To: <winpcap-users@winpcap.org></FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Sent: Tuesday, October 31, 2006 4:57 AM</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Subject: [Winpcap-users] PC rebooting phenomenon in winpcap application</FONT></SPAN></P>
<BR>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> Hello Everyone~</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> I</FONT><FONT SIZE=2 FACE="Courier New">¡¯</FONT><FONT SIZE=2 FACE="Courier New">m a beginner of the Winpcap and had made an applic</FONT><FONT SIZE=2 FACE="Courier New">ation with it.</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> It has been built on Visual Studio .NET 2003 on Windows XP Service pack 2.</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> Its function is to capture every packet from an Ethernet device to bypass </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> it to opposite side Ethernet device and vice versa. (Like a GW function)</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> Its throug</FONT><FONT SIZE=2 FACE="Courier New">hput is reach to 30Mbps.</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> The problem is that in every try, the application makes the PC to reboot </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> after some running (about 5 to 20 minutes)</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> Here is the blue screen dump of my situation</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> ------------------------------------------------------------------------------------------</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> An attempt was made to access a pageable (or completely invalid) address </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> at an</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> interrupt request level (IRQL) that is t</FONT><FONT SIZE=2 FACE="Courier New">oo high. This is usually</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> caused by drivers using improper addresses.</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> If kernel debugger is available get stack backtrace.</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> Arguments:</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> Arg1: 7c82deea, memory referenced</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> Arg2: 00000002, IRQL</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> Arg3: 00000000, value 0 = read operation, 1 = write ope</FONT><FONT SIZE=2 FACE="Courier New">ration</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> Arg4: 7c82deea, address which referenced memory</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> ------------------------------------------------------------------------------------------</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> Some window driver guy said that it looks like a problem of winpcap driver </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> (.sys)</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> But he can not</FONT> <FONT SIZE=2 FACE="Courier New">explain further because he doesn</FONT><FONT SIZE=2 FACE="Courier New">¡¯</FONT><FONT SIZE=2 FACE="Courier New">t know about winpcap </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> well¡¦¡¦</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> So are there any comments?</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> Any comment will be welcome ^^</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> I</FONT><FONT SIZE=2 FACE="Courier New">¡¯</FONT><FONT SIZE=2 FACE="Courier New">m using winpcap 3.1 beta 4</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> Have a nice day~</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> PS : Sorry for my terrible English¡¦¡¦</FONT><FONT SIZE=2 FACE="Courier New"> ^^</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">></FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> _______________________________________________</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> Winpcap-users mailing list</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> Winpcap-users@winpcap.org</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">> <A HREF="https://www.winpcap.org/mailman/listinfo/winpcap-users">https://www.winpcap.org/mailman/listinfo/winpcap-users</A> </FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">_______________________________________________</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Winpcap-users mailing list</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New">Winpcap-users@w</FONT><FONT SIZE=2 FACE="Courier New">inpcap.org</FONT></SPAN></P>
<P ALIGN=LEFT><SPAN LANG="en-us"><FONT SIZE=2 FACE="Courier New"><A HREF="https://www.winpcap.org/mailman/listinfo/winpcap-users">https://www.winpcap.org/mailman/listinfo/winpcap-users</A></FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
</BODY>
</HTML>